Geeks To Go is a helpful hub, where thousands of volunteer geeks quickly serve friendly answers and support. Check out the forums and get free advice from the experts. Register now to gain access to all of our features, it's FREE and only takes one minute. Once registered and logged in, you will be able to create topics, post replies to existing threads, give reputation to your fellow members, get your own private messenger, post status updates, manage your profile and so much more.

please double-click LSPFix.exe that you downloaded earlier. Check the "I know what I'm doing" button. You will see 2 panels. If there is any file listed in the "Remove" panel on the right-side, leave it as is and just click "Finish>>"

Please re-open HiJackThis and scan. Check the boxes next to all the entries listed below.

You may wish to print out a copy of these instructions to follow while you complete this procedure

Please reboot into safe mode Safe mode(continually tap the F8 key while your system is starting, select Safe Mode from the menu).

Please remove these entries from Add/Remove Programs in the Control Panel(if present):

ProSiteFinder

Please note any other programs that you dont recognize in that list in your next response

Please delete these folders using Windows Explorer(if present):

C:\Program Files\ProSiteFinder

Please delete these files using Windows Explorer(if present):

C:\Documents and Settings\Billy\Application Data\osoa.exe ( you may not be able to navigate to it ,if thats the case use the search function for osoa.exe )

After that, Reboot.

Please run this online virus scan:Panda Active Scan You need to use Internet Explorer for this scan.

Once you get to the Panda site, scroll down a bit and click on Scan your PC

A new window will appear; click on Check Now!

A new window will appear; fill in the boxes (Country, State, email addy)

Click on Scan Now! >If you have never used ActiveScan before, you will be prompted to install an ActiveX control (asinst.cab) : click on Install. Panda will install the component, and then install the latest signature files.

From "Select a device to scan...", choose "My Computer"

Allow the scan to run. It'll take a while.

When complete, click on "See Report", and then on "Save report"; save it to a convenient location.

I will need you to post that report in your next reply; simply open the text file, then copy/paste the content here. Also post a new Hijack log

tsukasa2008

Posted 17 October 2005 - 06:05 PM

tsukasa2008

Member

Topic Starter

Member

12 posts

ok, i didnt get to the panda thing yet. i did everything from the first part then went into Safe Mode and found no ProSiteFinder in the control panel add/remove tool and i didn't find an osoa.exe anywhere (i searched for it too). before moving on i just wanted to let you know this and wanted to see if that was OK or normal..(i did find the ProSiteFinder folder which i removed and has not returned). If it helps, i also just did a HiJackThis scan, here's the log.....

loophole

Posted 17 October 2005 - 08:43 PM

tsukasa2008

Posted 19 October 2005 - 01:22 PM

tsukasa2008

Member

Topic Starter

Member

12 posts

ok, so my parent freaked out and uninstalled stuff....alot of stuff. they freaked out about the panda thing and it being in our files then felt validated when they found the panda activescan in the installed programs list. but as far as i noe, no problems...i'll make sure to post anything if anything does pop-up (although i cant really tell as im banned from the computer for the next week). thanks for the help.

How to use Spybot to remove Spyware<=If you suspect that you have spyware installed on your computer, here are instructions on how to download, install and then use Spybot. Similar to Ad-Aware, I strongly recommend both to catch most spyware.

Prevention Programs:

Spywareblaster<=SpywareBlaster will prevent spyware from being installed.

IE/Spyad<=IE/Spyad places over 4000 websites and domains in the IE Restricted list which will severely impair attempts to infect your system. It basically prevents any downloads (Cookies etc) from the sites listed, although you will still be able to connect to the sites.

MVPS Hosts file<=The MVPS Hosts file replaces your current HOSTS file with one containing well know ad sites etc. Basically, this prevents your coputer from connecting to those sites by redirecting them to 127.0.0.1 which is your local computer

Google Toolbar<=Get the free google toolbar to help stop pop up windows.

Other necessary Programs: AntiVirus Program<=An AntiVirus program is a must! Whether it is a free version like AVG or Anti-Vir, or a shareware version like Norton or Kapersky, this is a must have.Firewall<=A firewall is definatley a must have. Two good free versions are Sygate and ZoneLabs.